After splunk indexer server restart we are getting 500 inetrnal server error , though the splunk service is up and running . We are getting below error .
fyi:
500 Internal Server Error
Return to Splunk home page
View more information about your request (request ID = 5c531015df7ff8cb7f3b90) in Search
Nothing I found in web_services.log,splunkd.log. Any help?
On an indexer, you don't normally need to have 8000/web port open. Have you got any config to disable web port?
Hi,
If nothing relevant found in log files then try below command to make sure if default files have not corrupted.
./splunk validate files
https://docs.splunk.com/Documentation/Splunk/7.2.1/Admin/ChecktheintegrityofyourSplunksoftwarefiles
Splunk reinstall or upgrade will fix the issue.